Critical infrastructure risk analysis
Business continuity plan (BCP) for essential services, cyber-risk assessment and exercises. Clients: energy, telecoms, transport, municipalities.
Continuity when one system fails
Continuity of an essential service means it works even when one or several systems fail. The Emergency Act and State Information System Act set a minimum; real work begins where that minimum does not cover 80% of incidents. NIS2 transposition adds duties for energy and telecoms operators.
Dependency map, stress tests, exercises.
Energy, telecoms, transport, municipality — sector-specific method.
Dependency map
Service value chain, dependencies, single points of failure (SPOF) and escalation paths. Visual map + DOCX.
Stress tests
Scenario study, table-top exercise (TTX), optional cyber simulation. RTO and RPO targets measured.
BCP & annual exercise
Continuity plan with roles, escalation criteria and lessons learned. One annual exercise with the client.
A concrete pack
- — 01 Business continuity plan (BCP) in Estonian and English
- — 02 Visual system-dependency map + DOCX
- — 03 Table-top exercise for leadership (4 hours)
- — 04 Annual review + one scenario refresh
EA, RIA, NIS2
Emergency Act, continuity requirements for essential services, Cybersecurity Act, NIS2 transposition. Documentation for the Information System Authority (RIA).